Project

General

Profile

Actions

Bug #5869

closed

Table names not properly escaped when building form save queries

Added by Nicola Chiapolini about 6 years ago. Updated about 4 years ago.

Status:
Closed
Priority:
High
Assignee:
Carsten Rose
Target version:
Start date:
25.04.2018
Due date:
% Done:

100%

Estimated time:
Discuss:
Prio Planung:
Vote:

Description

I had a table containing '-' characters in its name. QFQ forms on this table fail to save as the table name is not escaped:

INSERT INTO phd_committee-members ( `phd_student`, `fullname` ) VALUES ( ?, ? )

Actions #1

Updated by Carsten Rose about 6 years ago

Aber das macht doch auch nicht ... Tabellen mit einem minus Zeichen sind ein 'no go' ... Du hast natuerlich Recht - in den automatisch generierten Queries sollte alles escaped.

Wird gefixt.

Actions #2

Updated by Carsten Rose about 6 years ago

  • Target version set to 55
Actions #3

Updated by Nicola Chiapolini over 4 years ago

just checked and bug still exists

Actions #4

Updated by Carsten Rose over 4 years ago

  • Priority changed from Normal to High
  • Target version changed from 55 to 146
Actions #5

Updated by Carsten Rose over 4 years ago

  • Status changed from New to Some day maybe
Actions #6

Updated by Carsten Rose over 4 years ago

  • Status changed from Some day maybe to New
Actions #7

Updated by Carsten Rose about 4 years ago

  • Assignee set to Carsten Rose
Actions #8

Updated by Carsten Rose about 4 years ago

  • Target version changed from 146 to next5
Actions #9

Updated by Carsten Rose about 4 years ago

  • Status changed from New to Priorize
Actions #10

Updated by Carsten Rose about 4 years ago

  • Status changed from Priorize to ToDo
Actions #11

Updated by Carsten Rose about 4 years ago

  • Status changed from ToDo to Closed
  • % Done changed from 0 to 100
Actions #12

Updated by Carsten Rose about 4 years ago

  • Target version changed from next5 to 20.2.0
Actions

Also available in: Atom PDF